Known vulnerabilities in Microsoft Outlook

Vendor: Microsoft
Software: Microsoft Outlook
Software CPE: cpe:2.3:a:microsoft:microsoft_outlook:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 54
Public exploits: 7
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Outlook Microsoft Outlook is affected by 54 known vulnerabilities: 2 critical, 25 high, 16 medium, 11 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU141962 - Insufficiently Protected Credentials
CVE-2026-62882		 CWE-522 Low
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU141858 - Integer overflow
CVE-2026-70329		 CWE-190 High
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU141800 - Heap-based Buffer Overflow
CVE-2026-63518		 CWE-122 High
No
No
 16.0.5565.1000 12.08.2026 SB20260812234
#VU122586 - Exposure of sensitive information to an unauthorized actor
CVE-2026-21260		 CWE-200 Medium
No
No
 - 10.02.2026 SB2026021093
#VU112692 - Use After Free
CVE-2025-49699		 CWE-416 High
No
No
 - 09.07.2025 SB20250709110
#VU110771 - Improper input validation
CVE-2025-47171		 CWE-20 Medium
No
No
 - 10.06.2025 SB20250610101
#VU102706 - Use of Uninitialized Resource
CVE-2025-21357		 CWE-908 Medium
No
No
 - 14.01.2025 SB2025011477
#VU95971 - External Control of File Name or Path
CVE-2024-38173		 CWE-73 Medium
No
No
 - 14.08.2024 SB2024081409
#VU94007 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38020		 CWE-200 Medium
No
No
 - 09.07.2024 SB20240709121
#VU91752 - Incomplete List of Disallowed Inputs
CVE-2024-30103		 CWE-184 Medium
No
No
 - 11.06.2024 SB20240611268
#VU88423 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2024-20670		 CWE-451 High
No
No
 - 10.04.2024 SB2024041066
#VU86469 - Improper input validation
CVE-2024-21378		 CWE-20 Medium
Available
Exploited
 - 13.02.2024 SB2024021371
#VU80694 - Exposure of sensitive information to an unauthorized actor
CVE-2023-36763		 CWE-200 Medium
No
No
 16.0.5413.1000 12.09.2023 SB2023091267
#VU79148 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-36893		 CWE-451 Medium
No
No
 15.0.5579.1000, 16.0.5408.1000 08.08.2023 SB2023080866
#VU78199 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-33151		 CWE-451 Medium
No
No
 - 12.07.2023 SB2023071265
#VU78096 - Improper input validation
CVE-2023-35311		 CWE-20 Critical
No
Exploited
 - 11.07.2023 SB2023071167
#VU77236 - Memory corruption
CVE-2023-33131		 CWE-119 High
Available
No
 - 13.06.2023 SB2023061354
#VU73511 - Exposure of sensitive information to an unauthorized actor
CVE-2023-23397		 CWE-200 Critical
Available
Exploited
 - 14.03.2023 SB2023031428
#VU66320 - Heap-based Buffer Overflow
CVE-2022-35742		 CWE-122 Medium
No
No
 - 09.08.2022 SB2022080954
#VU53888 - Use After Free
CVE-2021-31941		 CWE-416 High
No
No
 - 08.06.2021 SB2021060814


Showing elements 1 - 20 out of 54